CVE-2020-14341 Server-side request forgery in Red Hat Single Sign-On
Authorized users can trigger SMTP connections to arbitrary hosts, enabling internal network scanning and information disclosure via timing analysis.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-14341?
CVE-2020-14341 is a low-severity server-side request forgery vulnerability in Redhat Single Sign-On, published on 12 Jan 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary hosts and ports of the user's choosing, and originating from the RHSSO installation. By observing differences in the timings of these scans, an attacker may glean information about hosts and ports which they do not have access to scan directly.
Weakness: CWE-385
Which versions are affected by CVE-2020-14341?
It affects 1 product.
Products include Redhat Single Sign-On.
How do I fix CVE-2020-14341?
No fix has been published for CVE-2020-14341 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2020-14341 being exploited?
There is no known exploitation of CVE-2020-14341 in the wild and no public exploit code.
Other vulnerabilities in Redhat Single Sign-On
Sources
Also known as GHSA-2fpm-8hx3-wxj9.